Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
File:                     4UrGEWFN0WXZRVcpbtftRsj8Al8.mft (raw, json)
Hash identifier:          n5G6dcmR9de+RmtMV9SK+ejYLQPD+UNrGAOUxyow6h8=
Subject key identifier:   A7:18:6C:E8:99:9F:CC:B5:1C:D0:BD:68:6E:B2:B3:DA:9C:46:3E:BA
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Certificate issuer:       /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial:       019A07EE12E330AA2C367C94D8E0B35E64B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
Manifest number:          1715
Signing time:             Tue 21 Oct 2025 18:00:34 +0000
Manifest this update:     Tue 21 Oct 2025 18:00:34 +0000
Manifest next update:     Wed 22 Oct 2025 18:00:34 +0000
Files and hashes:         1: 1-fKXBjqiTeM90rh_YcnHRZImMf4.roa (hash: XviyK9gZCSyNGe87uM1BJ71gLbA2w08qEYd7JArw4Hs=)
                          2: 21b6ntDP_41WHw4JgmJy5QMFjgw.roa (hash: OyGhDdjF1Bm2rSEG2L631phdq3gbyPG0iQYpMEVeFPo=)
                          3: 4UrGEWFN0WXZRVcpbtftRsj8Al8.crl (hash: NpXtWKmFIqJVgyZwl2f0X84gmOA+Uu3AD7XrTY5vG7M=)
                          4: 6bKmElTtCrApAY9rRgCE9VG2_VI.roa (hash: jkL7mJyzNc2SlG01Dl3hctC0mLi0oOg8Cg2cItdFmp8=)
                          5: 7p384sXqxwddixUy_mYYBxF3awU.roa (hash: shaUQH6DkAjCcH24QCvbbVnJZikn1zAyihmMsgzPJcI=)
                          6: EswWK13u7UJf1Xm-aJ2Imfit29g.roa (hash: /9v79+ATF8QEQ4eYOKWEhH/1P4aQ0PCUgp7hFThavBs=)
                          7: Exr4OKSNhnm-FznHB8jgpNbJZxQ.roa (hash: 1XCrVW6+X9DVjbzilln6lF+f4s4n32v5jZAfIBU7Z40=)
                          8: G-l8_nIjGXR2g3ie6C0b-DsumJM.roa (hash: qSX4dXaWMvoaO0z2I0BRCaHWI2LO9UgLxYp55tHYyDI=)
                          9: NZS2Ipchg2nhjy9FYCa-tr7edgc.roa (hash: J91+10sEZiq3a/L3jz4R1QTQGfsCXE1VL5KiBPRPpK8=)
                          10: Q88Qv2c-OY8pD9XQlm6AYLzEC9k.roa (hash: F0xmcjBp6hsmjep+VgSkib2PdKQQGRbjWEcgD1QBtbM=)
                          11: Sc4ZzMyRDR0gvOJ_zNA2g4Vxr68.roa (hash: gYB3OVnzjXyPr9Qm/lycd3gdpJQ/+Cl0X5zNJIEQ9rQ=)
                          12: Uoyhjzu1CnHo8tl7nk_ZhKwl5hU.roa (hash: 48l45O6og6BZyLVhyyu0j9BEA4j1BgnxIO+JWZUTc30=)
                          13: WXqBRwyxEDgQK5OlFrSMIaFpyVU.roa (hash: IpP8TaM5Wwj7+VayyaCIeA2tv6VLqBIorB1uda3TPMs=)
                          14: XSbgubujJJ9FZpTPfifgq3AkiU8.roa (hash: QttXfkZolFdSxkPkwsYt6vSDl8DXa766XeZMDQS4Mtw=)
                          15: clZIrkLG6qMnhbwEIW_pAKHru3U.roa (hash: h9NEDzPBspMO8P2mwx1nUeUnaVh8FCZbKTMitP3Kq70=)
                          16: dgAUOvzxPFSZzQFCZsXq5wSmuQ4.roa (hash: onCp8InwxVqnOmHcxw1M4XVSgwg1eg4cDcncJgrt2EU=)
                          17: dp8pvQa4vbHOUBRQq7A88UhSl18.roa (hash: 3Lmekz/0Q0BYHatiLmy2hW/4qKq+J2XWsl9s9mwNmF0=)
                          18: kQOaGpW4jD-8xGlNbkC3aZmZ2oA.roa (hash: nAfr6WTUGifpmHx8/uBqTFl3/GkMakZU6HzPC4BRKRc=)
                          19: nqNpqxiiesheCCeqK53xQj3S098.roa (hash: 2DtLb2ES6JjRgW8bn+Qbl4U1xhy1QrUbg+jAVJ9BH7A=)
                          20: qg9H3rvWINznh7UPHplQbVY73BM.roa (hash: Nx2IWHCLZcluhgcIHU0CznQVLHn9XdJ3ef9jXTt3p68=)
                          21: uMSALwCFCjHgfXY8GtxojOClYFk.roa (hash: kBut8kDkT5GFXnvjVfuze1IARhQ7/X9J0rwdlLP0FyY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 14:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:07:ee:12:e3:30:aa:2c:36:7c:94:d8:e0:b3:5e:64:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
        Validity
            Not Before: Oct 21 18:00:34 2025 GMT
            Not After : Oct 22 18:00:34 2025 GMT
        Subject: CN=a7186ce8999fccb51cd0bd686eb2b3da9c463eba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d8:b2:8c:cb:c1:87:a0:ec:59:11:8c:ba:fb:
                    a9:7c:5b:ee:81:56:83:5a:e7:79:57:a7:a2:25:82:
                    5b:5d:27:04:b8:ad:7f:4d:65:39:33:12:f5:41:38:
                    68:2c:dd:30:99:d5:0f:8f:6f:6e:20:bd:36:f7:da:
                    c6:d3:28:54:1b:d9:7f:a6:c2:c7:16:88:41:87:fb:
                    86:ed:1a:45:f3:eb:ac:7a:d9:e4:c2:19:f4:51:5b:
                    0d:1d:0f:bc:83:11:11:a7:29:10:f1:98:f3:33:ad:
                    eb:3f:68:f1:5d:4f:92:b7:f3:90:90:55:11:45:fb:
                    d6:8d:40:16:7e:9c:62:00:ce:bd:77:dd:ee:a7:61:
                    62:b9:81:fa:fd:c0:17:f3:97:13:be:40:51:18:50:
                    bf:e1:93:ab:20:27:dd:d0:fa:ef:29:68:76:bc:95:
                    89:9f:f8:a3:e1:71:9b:f2:89:58:10:62:d6:eb:4b:
                    1d:16:3d:10:5d:97:9b:6c:74:b2:7e:d3:78:19:8e:
                    23:31:70:ec:95:35:84:1f:40:ad:b8:8d:96:d5:8c:
                    04:c7:31:e6:fc:8b:c3:98:8f:03:61:98:50:10:7c:
                    a4:97:4d:92:65:3c:01:b6:78:5d:39:aa:dc:c2:11:
                    a1:cd:7f:17:63:cd:60:55:73:46:7b:8e:3b:a9:92:
                    7a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:18:6C:E8:99:9F:CC:B5:1C:D0:BD:68:6E:B2:B3:DA:9C:46:3E:BA
            X509v3 Authority Key Identifier:
                keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:a4:37:6d:83:3e:e0:48:62:55:15:d5:00:b8:d7:85:70:a0:
         5d:22:3a:d8:bd:ae:9f:ba:1d:bb:a9:b7:f2:df:6c:6e:1a:80:
         0c:a6:bc:3c:c1:f9:f7:89:b3:a6:9f:c9:33:ff:33:ff:9e:3f:
         59:4a:37:16:ba:bd:8c:1c:64:f5:b1:ce:bc:e4:b4:ab:23:cc:
         59:17:a1:58:3f:82:cb:11:47:d6:81:f8:f3:fc:21:24:7a:87:
         f5:f3:b7:f8:7b:80:09:4d:6f:40:a5:76:58:1d:ba:0a:76:54:
         61:6e:ea:01:6c:d4:75:3d:17:97:59:ca:f2:8d:b1:7d:64:2a:
         ae:3d:85:b7:fe:00:2e:ec:99:f5:7c:c9:38:88:63:3d:a0:2f:
         b4:e4:9a:66:c5:5a:ff:48:94:14:d6:c9:b8:d0:3e:7a:a9:19:
         79:e9:24:01:bf:fc:43:d9:82:41:50:02:40:2e:35:15:d9:23:
         90:13:04:25:0f:7c:e9:f1:9e:c9:c0:1f:c9:65:cf:43:15:d9:
         92:ea:79:9b:08:95:d0:c6:e1:fc:85:62:cf:20:79:c5:c5:36:
         bc:bc:fc:f9:2c:df:74:c1:5c:51:f9:14:d3:6f:67:09:52:3b:
         47:b2:f6:65:ba:9b:67:88:95:fe:df:3d:1c:31:98:e5:8b:37:
         1a:36:ca:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:01:40 2025 by rpki-client